Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: Pbjp22sTToCSwk7gO2NVXQliJlzWpfHly+ny4cj/Tf0=
Subject key identifier: 5B:91:A2:68:B5:2B:2B:DE:A5:C7:00:B9:9D:84:65:AE:35:B9:A9:0C
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 0196C3B962B6EB2F7E53BFBADC036F813FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0817
Signing time: Mon 12 May 2025 09:00:28 +0000
Manifest this update: Mon 12 May 2025 09:00:28 +0000
Manifest next update: Tue 13 May 2025 09:00:28 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: /mlZbG4XE7cYeqTzQxqiw8hrt/dTMWLBcxxDNwzrO1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:62:b6:eb:2f:7e:53:bf:ba:dc:03:6f:81:3f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: May 12 09:00:28 2025 GMT
Not After : May 13 09:00:28 2025 GMT
Subject: CN=5b91a268b52b2bdea5c700b99d8465ae35b9a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:f6:a2:38:2c:11:6e:e9:82:63:6d:a6:b2:
eb:a4:0b:e4:d8:38:5d:f5:8f:d3:6d:20:c8:75:86:
9b:86:2d:b4:2c:b6:e1:23:30:95:b0:65:06:0b:4d:
58:5b:9a:c8:68:82:4b:dc:04:29:65:7c:e1:ab:3c:
90:92:2f:90:7b:df:ae:54:b0:cb:45:81:cd:65:71:
f7:eb:a6:60:cd:17:aa:ce:1f:6e:59:6a:5a:34:08:
46:2f:71:44:3b:3a:1b:03:b0:23:83:a8:81:eb:95:
74:de:9a:81:6a:2c:cd:8e:f7:2d:37:98:e6:d5:45:
ed:0d:36:39:34:e6:8d:ad:79:29:b7:81:08:ac:99:
89:3b:63:2d:1d:3c:eb:02:ac:5b:6e:ee:10:88:57:
3b:9b:97:90:27:99:c5:aa:8c:3c:c6:c9:ff:4f:d9:
39:ce:20:d5:29:f1:1e:09:4d:be:4e:29:c3:bf:5c:
91:02:3d:6b:42:60:2c:5e:4e:d9:f7:ef:0a:4d:fe:
41:85:b5:2f:4d:cb:3f:37:40:61:47:26:8a:0f:ce:
92:43:6f:ec:01:41:16:4e:36:43:72:d0:20:8e:53:
0a:8d:9a:75:ec:d5:5b:0d:5e:40:99:4a:1a:a2:0d:
ee:ef:86:2c:5c:fe:f5:6c:a2:42:b3:92:71:e5:41:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:A2:68:B5:2B:2B:DE:A5:C7:00:B9:9D:84:65:AE:35:B9:A9:0C
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6b:26:40:e4:5f:d2:aa:2e:63:aa:87:22:1f:83:b8:b7:a5:
b2:4a:11:8f:c5:6a:8f:5f:57:b5:21:ca:41:9e:aa:8f:cb:62:
dc:08:30:18:db:c8:51:58:78:67:51:a5:5c:81:0f:6d:c3:ee:
88:1c:db:2d:d1:bf:21:23:71:46:76:d9:e4:e6:f1:fa:f3:36:
87:e1:02:25:e0:9c:72:95:58:3d:8a:8c:06:99:7c:6b:f4:b3:
ab:1d:40:75:45:d3:7c:90:43:9a:aa:0d:ec:25:aa:d8:0f:21:
42:16:c5:55:ae:ea:47:36:3a:36:be:40:24:f5:93:94:ee:99:
f2:7d:1d:10:42:8a:c2:e9:18:75:32:3e:0f:1b:a0:6b:88:16:
89:fd:93:2b:e7:1d:18:dc:42:67:e4:f3:54:9d:2f:10:39:6e:
e6:6e:65:37:40:28:b3:75:c4:ea:a5:3a:3e:51:99:de:2d:45:
b8:87:cf:8d:d0:3f:9f:80:29:c4:ce:ce:c7:33:15:5b:47:29:
64:7b:0c:0a:59:61:92:b1:69:5b:45:e0:5e:e2:45:8f:3b:11:
38:05:4c:00:7e:59:ba:7a:bd:20:58:23:80:03:9a:f8:04:85:
4f:07:1c:24:59:e3:d6:a4:32:25:a8:b0:d2:21:c0:18:90:1a:
8b:6f:97:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDuWK26y9+U7+63ANvgT/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTY5NmU2ZTI1YjQ5MmJiN2UwN2NiMzI5YmI0MzU0YjEx
MWE2ODEwHhcNMjUwNTEyMDkwMDI4WhcNMjUwNTEzMDkwMDI4WjAzMTEwLwYDVQQD
Eyg1YjkxYTI2OGI1MmIyYmRlYTVjNzAwYjk5ZDg0NjVhZTM1YjlhOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiT2ojgsEW7pgmNtprLrpAvk2Dhd
9Y/TbSDIdYabhi20LLbhIzCVsGUGC01YW5rIaIJL3AQpZXzhqzyQki+Qe9+uVLDL
RYHNZXH366ZgzReqzh9uWWpaNAhGL3FEOzobA7Ajg6iB65V03pqBaizNjvctN5jm
1UXtDTY5NOaNrXkpt4EIrJmJO2MtHTzrAqxbbu4QiFc7m5eQJ5nFqow8xsn/T9k5
ziDVKfEeCU2+TinDv1yRAj1rQmAsXk7Z9+8KTf5BhbUvTcs/N0BhRyaKD86SQ2/s
AUEWTjZDctAgjlMKjZp17NVbDV5AmUoaog3u74YsXP71bKJCs5Jx5UHoMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuRomi1KyvepccAuZ2EZa41uakMMB8GA1UdIwQY
MBaAFFDmlubiW0krt+B8sym7Q1SxEaaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3Njgt
NjE0MWQ5OTYzNGI1LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYWRmM2ItYzg2Ny00MTYzLTg3NjgtNjE0MWQ5OTYzNGI1
LzEvVU9hVzV1SmJTU3UzNEh5ektidERWTEVScG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2smQORf
0qouY6qHIh+DuLelskoRj8Vqj19XtSHKQZ6qj8ti3AgwGNvIUVh4Z1GlXIEPbcPu
iBzbLdG/ISNxRnbZ5Obx+vM2h+ECJeCccpVYPYqMBpl8a/Szqx1AdUXTfJBDmqoN
7CWq2A8hQhbFVa7qRzY6Nr5AJPWTlO6Z8n0dEEKKwukYdTI+Dxuga4gWif2TK+cd
GNxCZ+TzVJ0vEDlu5m5lN0Aos3XE6qU6PlGZ3i1FuIfPjdA/n4ApxM7OxzMVW0cp
ZHsMCllhkrFpW0XgXuJFjzsROAVMAH5Zunq9IFgjgAOa+ASFTwccJFnj1qQyJaiw
0iHAGJAai2+XCg==
-----END CERTIFICATE-----
Generated at Mon May 12 11:13:58 2025 by rpki-client